Author Topic: Connection to bad sites not blocked  (Read 3214 times)

0 Members and 1 Guest are viewing this topic.

Offline naupai

  • Newbie
  • *
  • Posts: 5
Connection to bad sites not blocked
« on: July 03, 2019, 06:14:17 PM »
Hi Avast,

Recently I'm picking up connection attempt to r.sastts.com, rokuq.com and nusojog.com from a few of our workstation.
This addresses has been flagged as Botnet connection attempt by our DNS service provider.

I have ran Avast SmartScan and Full-scan on the workstation that is making the connection but Avast pickup nothing.
I suspected that this connection is made using js script while user are browsing using Chr0m3 browser.

Any definition update guys?

Offline mickey.b

  • Business Senior Support Technician
  • Avast team
  • Full Member
  • *
  • Posts: 137
    • Avast Business Technical Support
Re: Connection to bad sites not blocked
« Reply #1 on: July 09, 2019, 06:38:33 PM »
Hi Avast,
Recently I'm picking up connection attempt to r.sastts.com, rokuq.com and nusojog.com from a few of our workstation.
This addresses has been flagged as Botnet connection attempt by our DNS service provider.
I have ran Avast SmartScan and Full-scan on the workstation that is making the connection but Avast pickup nothing.
I suspected that this connection is made using js script while user are browsing using Chr0m3 browser.
Any definition update guys?

Sorry we haven't responded sooner. Did Avast ever detect this? If not, we'd need whatever that it is sending out these requests to add to our definitions (files, software, etc.)
Have you looked for any suspicious Google Chrome extensions?
- Mickey B.
Avast Business Senior Support Technician
https://www.avast.com/business/support